We started developing our vulnerability management platform (VMP) at Spotify in Q2, 2020, and now that we’ve implemented it and use the system in our day-to-day work, we wanted to take a moment to share our journey to help reduce security risks in an efficient and scalable manner.

We released a collection of improvements to Artifact Attestations to make the verification of attestations easier and more consistent. Artifact Attestations let you create provenance signatures, which provide an unforgeable…

Brendan Gregg's homepage: I use this site to share various things, mostly my work with computers, specifically, computer performance analysis and methodology.

This is what happens when AI finds out it’s an AI

Introducing Dastardly - a free, lightweight web application security scanner for your CI/CD pipeline, from the makers of Burp Suite. Secure web development ain't easy Ensuring your code is written sec

It’s the Honest Trailer for Tron colon Legacy! The rebootquel to the 80’s movie that imagined: “what if the story, was IN the computer?” It’s a cool looking ...

Cool project names with the Project Name Generator. Easy to use interface. Fast names

These scripts can streamline your installation.

Mirror a portion of your screen to a virtual monitor for easier screen sharing. - splitbrain/clipscreen

How MCP Authentication Flaws Enable RCE in Claude Code, Gemini CLI, and More

The Unsure Calculator is an online tool that lets you calculate with numbers you’re not sure about.

Here's how to get started with the open source tool Continue

Winamp released its source code with a license that drew a lot of attention. That’s when other apps’ code was found inside.

Come and join 150M developers on GitHub that can now code with Copilot for free in VS Code.

De-stressing and pushing your tinnitus out of your mind are probably among the best pieces of advice you can get. Tinnitus can jump in and play with your nerves, you need to stop letting it do so and teach your brain to tune it out.

Better security for Ubuntu users. A good step.

Open-source infrastructure and data orchestration platform for risk decisioning - ballerine-io/ballerine